Lucene search
HistoryOct 26, 2015 - 2:59 p.m.
CVE-2015-7881
drupal
colorbox
cve-2015-7881
security
access restrictions
authenticated users
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.4%
The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and “add unexpected content to a Colorbox” via unspecified vectors, possibly related to a link in a comment.
Affected configurations
Node
colorbox_projectcolorboxMatch7.x-2.0drupal
ORcolorbox_projectcolorboxMatch7.x-2.1drupal
ORcolorbox_projectcolorboxMatch7.x-2.2drupal
ORcolorbox_projectcolorboxMatch7.x-2.3drupal
ORcolorbox_projectcolorboxMatch7.x-2.4drupal
ORcolorbox_projectcolorboxMatch7.x-2.5drupal
ORcolorbox_projectcolorboxMatch7.x-2.6drupal
ORcolorbox_projectcolorboxMatch7.x-2.7drupal
ORcolorbox_projectcolorboxMatch7.x-2.8drupal
ORcolorbox_projectcolorboxMatch7.x-2.9drupal
Related
prion
prion
Design/Logic Flaw
2015-10-26 14:59:00
nvd
nvd
CVE-2015-7881
2015-10-26 14:59:11
drupal
drupal
Colorbox - Access bypass - Less Critical - SA-CONTRIB-2015-156
2015-10-07 00:00:00
cvelist
cvelist
CVE-2015-7881
2015-10-26 14:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.4%
Related for CVE-2015-7881